CVE-2015-5914

The EFI component in Apple OS X before 10.11 allows physically proximate attackers to modify firmware during the EFI update process by inserting an Apple Ethernet Thunderbolt adapter with crafted code in an Option ROM, aka a "Thunderstrike" issue. NOTE: this issue exists because of an incomplete...

CVE-2015-5900

CVE-2015-5900: Affects Apple OS X EFI component; an incorrect value in the protected range register allows a crafted app to write to an unintended address, causing a denial of service via boot failure. Root cause: EFI protected range misconfig. Impact: boot process disruption. Remediation/fix det...

CVE-2015-5914

CVE-2015-5914 affects the EFI component in Apple OS X prior to 10.11. The issue enables physically proximate attackers to modify firmware during EFI updates by inserting an Apple Ethernet Thunderbolt adapter with crafted code in an Option ROM (Thunderstrike). Root cause is an incomplete fix for C...

Oracle: Security Advisory (ELSA-2013-1645)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 21 : xen-4.4.2-9.fc21 (2015-12714)

QEMU heap overflow flaw while processing certain ATAPI commands. XSA-138, CVE-2015-5154 1247142 rebuild efi grub.cfg if it is present 1239309, add gcc5 build fixes, one needed for the following patch, modify gnutls use in line with Fedora's crypto policies 117935 Note that Tenable Network Securit...

Fedora 22 : xen-4.5.1-5.fc22 (2015-12657)

QEMU heap overflow flaw while processing certain ATAPI commands. XSA-138, CVE-2015-5154 1247142 try again to fix xen-qemu-dom0-disk-backend.service 1242246 correct qemu location in xen-qemu-dom0-disk-backend.service 1242246, rebuild efi grub.cfg if it is present 1239309, re-enable remus by buildi...

Thunderstrike 2: World's First Firmware Worm That Infects Mac Computers Without Detection

If you think Apple’s Mac computers are much more secure than Windows-powered systems, you need to think again. This isn’t true, and security researchers have finally proved it. Two security researchers have developed a proof-of-concept computer worm for the first time that can spread automaticall...

CVE-2015-2890

The BIOS implementation on Dell Latitude, OptiPlex, Precision Mobile Workstation, and Precision Workstation Client Solutions CS devices with model-dependent firmware before A21 does not enforce a BIOSCNTL locking protection mechanism upon being woken from sleep, which allows local users to conduc...

Code injection

The BIOS implementation on Dell Latitude, OptiPlex, Precision Mobile Workstation, and Precision Workstation Client Solutions CS devices with model-dependent firmware before A21 does not enforce a BIOSCNTL locking protection mechanism upon being woken from sleep, which allows local users to conduc...

CVE-2015-2890

The BIOS implementation on Dell Latitude, OptiPlex, Precision Mobile Workstation, and Precision Workstation Client Solutions CS devices with model-dependent firmware before A21 does not enforce a BIOSCNTL locking protection mechanism upon being woken from sleep, which allows local users to conduc...

CVE-2015-2890

CVE-2015-2890 affects Dell Latitude, OptiPlex, Precision Mobile Workstation and Precision Workstation CS devices with model-dependent firmware before A21. The root cause is failure to enforce BIOS_CNTL locking protection when resuming from sleep, allowing a local attacker with console access to p...

Mac OS X Multiple EFI Vulnerabilities (EFI Security Update 2015-001)

The remote Mac OS X host is running EFI firmware that is affected by multiple vulnerabilities : - An insufficient locking issue exists, when resuming from sleep states, which allows a local attacker to write to the EFI flash memory by using an crafted application with root privileges. CVE-2015-36...

APPLE-SA-2015-06-30-3 Mac EFI Security Update 2015-001

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 APPLE-SA-2015-06-30-3 Mac EFI Security Update 2015-001 Mac EFI Security Update 2015-001 is now available and addresses the following: EFI Available for: OS X Mountain Lion v10.8.5, OS X Mavericks v10.9.5 Impact: A malicious application with root...

Apple Mac OS X / EFI multiple security vulnerabilities

Privilege escalation, information disclosure, multiple memory corruptions...

CVE-2015-3693

Apple Mac EFI before 2015-001, as used in OS X before 10.10.4 and other products, does not properly set refresh rates for DDR3 RAM, which might make it easier for remote attackers to conduct row-hammer attacks, and consequently gain privileges or cause a denial of service memory corruption, by...

CVE-2015-3692

Apple Mac EFI before 2015-001, as used in OS X before 10.10.4 and other products, does not enforce a locking protection mechanism upon being woken from sleep, which allows local users to conduct EFI flash attacks by leveraging root privileges...

Memory corruption

Apple Mac EFI before 2015-001, as used in OS X before 10.10.4 and other products, does not properly set refresh rates for DDR3 RAM, which might make it easier for remote attackers to conduct row-hammer attacks, and consequently gain privileges or cause a denial of service memory corruption, by...

Design/Logic Flaw

Apple Mac EFI before 2015-001, as used in OS X before 10.10.4 and other products, does not enforce a locking protection mechanism upon being woken from sleep, which allows local users to conduct EFI flash attacks by leveraging root privileges...

CVE-2015-3692

CVE-2015-3692 describes an EFI unlock/locking issue in Apple Mac EFI present in OS X up to 10.10.3, where the FLOCKDN protection bit could remain unset after resume from sleep, enabling a local attacker with root privileges to perform EFI flash attacks. Connected documents provide concrete detail...

CVE-2015-3693

Apple Mac EFI before 2015-001, as used in OS X before 10.10.4 and other products, does not properly set refresh rates for DDR3 RAM, which might make it easier for remote attackers to conduct row-hammer attacks, and consequently gain privileges or cause a denial of service memory corruption, by...